--- title: "Generating Tokens" slug: "how-to-create-your-token" updated: 2026-08-12T11:53:39Z published: 2026-08-12T11:53:39Z canonical: "success.panaya.com/how-to-create-your-token" --- > ## Documentation Index > Fetch the complete documentation index at: https://success.panaya.com/llms.txt > Use this file to discover all available pages before exploring further. # Generating Tokens You need to be assigned the **API Execute** [permission](/v1/docs/how-to-define-roles-permissions) to use your token to authenticate to Panaya. If the email of the user who created the token changes, the token will need to be created again **To create your Access Token -** 1. Click on **Settings![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/image-1638996333385.png)** to open up the **Configuration** panel 2. In **Security**, select **Generate & Manage** API Tokens **![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/image-1701693554485.png)** 3. Click on **+ Generate API Token** ![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/image-1698844615702.png) 4. Select the token type - Good to know!For Worksoft or Jira Integration, an **Access Token** needs to be used. For the automatic ETL extraction, currently only an **Access Token** is supported. The API Token will **not** work for these integrations. **API Token** (Recommended) Enables quick Panaya authentication with the HTTP Authorization request header. Does not expire. For API Tokens, set the token name and click on **Generate**.  ![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/image-1698844111653.png)Use the **Copy to clipboard** button to copy the token. Note: After closing the pop-up, you cannot view this token again.![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/new_api_token.jpg) **Access Token** An expiring token is used for calling the Login API (mainly for Jira integration). Set a Token Name and Expiration Date for an access token, then click **Generate.** ![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/image-1698844578549.png) 5. **Copy the token** to the clipboard to be used in your **Rest** simulator (such as **Postman**) 6. To **disable** a token, select the token in the list and click on **Revoke** ![](https://cdn.document360.io/f404076c-de23-4609-848e-2dfd4ef701b0/Images/Documentation/image-1698844675940.png) **User Admin?** You can [monitor and deactivate user access tokens at any time](/v1/docs/how-to-monitor-and-disable-user-tokens-as-administrator). Do you have more than one Panaya account?The Token user can only be associated with one Panaya account. ## Related - [Monitoring and Disabling User Tokens (as administrator)](/how-to-monitor-and-disable-user-tokens-as-administrator.md) - [Authenticating via API with an Access Token](/how-to-authenticate-to-panaya-via-api-with-an-access-token.md)